Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@roadiehq/backstage-plugin-bulk-catalog-import
Advanced tools
![repos list in the Bulk Catalog Import plugin for Backstage](https://raw.githubusercontent.com/RoadieHQ/backstage-plugin-bulk-catalog-import/master/docs/repo-list.png)
https://roadie.io/backstage/plugins/bulk-catalog-import
If you have your own backstage application without this plugin, here it's how to add it:
backstage/packages/app
project add the plugin as a package.json
dependency:yarn add @roadiehq/backstage-plugin-bulk-catalog-import
// packages/app/src/plugins.ts
export { plugin as BulkCatalogImportPlugin } from '@roadiehq/backstage-plugin-bulk-catalog-import';
App.tsx
source file:// packages/app/src/App.tsx
import { Router as BulkCatalogImportRouter } from '@roadiehq/backstage-plugin-bulk-catalog-import';
...
<Route
path="/bulk-catalog-import/*"
element={<BulkCatalogImportRouter />}
/>
// packages/app/src/components/Root/Root.tsx
<SidebarItem
icon={AddIcon}
to="bulk-catalog-import"
text="Bulk catalog import"
/>
If you are not yet authenticated via GitHub OAuth, on the first visit plugin will prompt you to login via GitHub.
Your organization may have Third-party application access restriction, which means that upon authenticating with Github you will be able to request organization owner to grant backstage app access to organization private data via GitHub API. Until the access is granted, you won't be able to access organization's data via this plugin. Note that you have to be an organization's member, not an outside collaborator to be able to fetch organization's data via GitHub API.
You can clone the plugin repo into the packages/
directory:
git clone https://github.com/RoadieHQ/backstage-plugin-bulk-catalog-import.git bulk-catalog-import
and run yarn
in the root backstage directory - it will create a symbolic link so the dependency will be provided from the source code instead of node_modules package.
FAQs
![repos list in the Bulk Catalog Import plugin for Backstage](https://raw.githubusercontent.com/RoadieHQ/backstage-plugin-bulk-catalog-import/master/docs/repo-list.png)
We found that @roadiehq/backstage-plugin-bulk-catalog-import demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.